Microkernel OS Criticality Mode Adaptation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current operating systems, particularly monolithic ones, are not well-suited for meeting security and safety requirements in different criticality modes, leading to increased complexity in interprocess communication and limited software reuse, necessitating separate operating systems for each mode.
Innovation Solution
A method and system for a microkernel-based operating system that supports multiple criticality modes, allowing adaptation of settings based on conditions, enabling the same microkernel to be used across all criticality modes, thereby simplifying software reuse and reducing implementation, integration, and maintenance efforts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate operating systems are used for each criticality mode, then security and safety requirements are met, but device complexity and implementation effort increase
Solution Approach 1:
The patent applies universality by enabling a single microkernel-based operating system to serve multiple criticality modes (normal, safe, trusted) through configurable settings. The operating system can be adapted to different criticality requirements without requiring separate OS instances, thereby reducing overall system complexity while maintaining security and safety guarantees through mode-specific configuration rather than separate system implementations
2Reliability
If different operating systems are used for different criticality modes, then security isolation is achieved, but interprocess communication becomes more complicated
Solution Approach 1:
The patent introduces an intermediary mechanism in the form of a configurable microkernel that mediates between different criticality modes. The microkernel provides a unified interface for interprocess communication that works across all criticality modes, eliminating the need for complex communication protocols between separate operating systems. The kernel's configuration system allows security isolation to be maintained while providing a simplified, consistent communication API throughout the system
3Reliability
If dedicated CPU cores are allocated for critical tasks, then freedom from interference is achieved, but CPU utilization efficiency decreases
Solution Approach 1:
The patent applies dynamics by enabling the operating system to dynamically adjust CPU core allocation based on the current criticality mode and task requirements. Rather than statically assigning dedicated cores to critical tasks, the system can dynamically switch between modes and allocate cores as needed. This allows the system to maintain freedom from interference for critical tasks when required while maximizing CPU utilization efficiency during normal operation through flexible, dynamic resource management
4Reliability
If multiple operating systems are deployed, then criticality mode requirements are met, but software reuse is limited
Solution Approach 1:
The patent applies universality by designing a single microkernel-based operating system that can be configured to meet different criticality mode requirements. The same core software components and applications can be reused across normal, safe, and trusted modes by adjusting kernel configuration settings rather than requiring separate software implementations. This significantly improves software reuse capability while maintaining the ability to meet diverse criticality requirements through configuration rather than code duplication
Data Source
AI summary
A microkernel-based operating system in a vehicle is initially operated in a first criticality mode of multiple supported criticality modes. In case a condition is determined that requires a transition to a second criticality mode of the multiple supported criticality modes, settings of the microkernel-based operating system are adapted in accordance with the second criticality mode. The microkernel-based operating system is then operated in the second criticality mode.